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What is Claimed is : 

1 . A method of generating computer security threat management 
information, comprising: 

receiving notification of a computer security threat; 
5 generating a computer-actionable Threat Management Vector (TMV) from the 

notification that was received, the TMV including therein a first computer-readable 
field that provides identification of at least one system type that is affected by the 
computer security threat, a second computer-readable field that provides identification 
of a release level for the system type and a third computer-readable field that provides 
10 identification of a set of possible countermeasures for a system type and a release 
level; and 

transmitting the TMV that is generated to a plurality of target systems for 
processing by the plurality of target systems. 

15 2. A method according to Claim 1 wherein the generating comprises 

selecting a system type, release level and possible countermeasures from a database 
that lists system types, release levels and possible countermeasures in a computer- 
readable format. 

20 3. A method according to Claim 1 wherein the system type comprises a 

computer operating system type and wherein the release level comprises a computer 
operating system release level. 

4. A method according to Claim 1 wherein the set of possible 

25 countermeasures comprises an identification of a countermeasure mode of installation. 

5. A method according to Claim 1 wherein at least one of the 
identifications comprises a pointer. 
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6. A method according to Claim 1 wherein the TMV further includes 
therein a fourth computer-readable field that provides identification of at least one 
subsystem type that is affected by the computer security threat and a fifth computer- 
readable field that provides identification of a release level for the subsystem type, the 

5 third computer-readable field providing identification of a set of possible 
countermeasures for a subsystem type and a release level. 

7. A method according to Claim 6 wherein the subsystem type comprises 
an application program type. 

10 

8. A method according to Claim 1 wherein the TMV further includes 
therein a sixth computer-readable field that provides identification of the computer 
security threat. 

15 9. A system for generating computer security threat management 

information, comprising: 

a Threat Management Vector (TMV) generator that is configured to generate a 
computer-actionable TMV from a notification of a computer security threat that is 
received, the TMV including therein a first computer-readable field that provides 

20 identification of at least one system type that is affected by the computer security 

threat, a second computer-readable field that provides identification of a release level 
for the system type and a third computer-readable field that provides identification of 
a set of possible countermeasures for a system type and a release level. 

25 10. A system according to Claim 9 wherein the TMV generator is also 

configured to transmit the TMV that is generated to a plurality of target systems for 
processing by the plurality of target systems. 

11. A system according to Claim 9 further comprising a common 
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semantics database that lists system types, release levels and possible countermeasures 
in a computer-readable format, wherein the TMV generator is responsive to the 
common semantics database to generate the TMV based upon user selection of a 
system type, release level and possible countermeasures from the common semantics 
5 database for the computer security threat. 

12. A system according to Claim 9 wherein the system type comprises a 
computer operating system type and wherein the release level comprises a computer 
operating system release level. 

10 

13. A system according to Claim 9 wherein the set of possible 
countermeasures comprises an identification of a countermeasure mode of installation. 

14. A system according to Claim 13 wherein the set of possible 

1 5 countermeasures further comprises a pointer to a remediation to be applied as a 
countermeasure . 

15. A system according to Claim 9 wherein the TMV further includes 
therein a fourth computer-readable field that provides identification of at least one 

20 subsystem type that is affected by the computer security threat and a fifth computer- 
readable field that provides identification of a release level for the subsystem type, the 
third computer-readable field providing identification of a set of possible 
countermeasures for a subsystem type and a release level. 

25 16. A system according to Claim 15 wherein the subsystem type comprises 

an application program type. 

17. A system according to Claim 9 wherein the TMV further includes 
therein a sixth computer-readable field that provides identification of the computer 
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security threat. 

18. A computer-actionable computer security Threat Management Vector 
(TMV) comprising: 

5 a first computer-readable field that provides identification of at least one 

system type that is affected by a computer security threat; 

a second computer-readable field that provides identification of a release level 
for the system type; and 

a third computer-readable field that provides identification of a set of possible 
1 0 countermeasures for a system type and a release level. 

19. A TMV according to Claim 18 wherein the system type comprises a 
computer operating system type and wherein the release level comprises a computer 
operating system release level. 

15 

20. A TMV according to Claim 1 8 wherein the set of possible 
countermeasures comprises an identification of a countermeasure mode of installation. 

21 . A TMV according to Claim 1 8 wherein at least one of the 
20 identifications comprises a pointer. 

22. A TMV according to Claim 18 further comprising: 

a fourth computer-readable field that provides identification of at least one 
subsystem type that is affected by the computer security threat; 
25 a fifth computer-readable field that provides identification of a release level 

for the subsystem types; and 

wherein the third computer-readable field provides identification of a set of 
possible countermeasures for a subsystem type and a release level. 
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23. A TMV according to Claim 18 wherein the TMV further includes 
therein a sixth computer-readable field that provides identification of the computer 
security threat. 
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